Skip to content
Noroxi

caldera records

82 published records for vendor caldera.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 1.2%
Pre-auth RCE
13
With a fix record
1.2%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    82 records
    • CVE-2000-0917
      64This week

      Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.

      CriticalCVSS 10.0WeaponizedEPSS 79%

      caldera · openlinux ebuilderDec 19, 2000

    • CVE-1999-0043
      52Plan

      Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.

      CriticalCVSS 9.8No exploitEPSS 45%

      isc · innDec 4, 1996

    • CVE-1999-0368
      52Plan

      Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.

      CriticalCVSS 10.0Proof of conceptEPSS 40%

      proftpd project · proftpdFeb 9, 1999

    • CVE-1999-0009
      49Plan

      Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

      CriticalCVSS 10.0Proof of conceptEPSS 29%

      data general · dg uxApr 8, 1998

    • CVE-1999-0002
      48Plan

      Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.

      CriticalCVSS 10.0Proof of conceptEPSS 28%

      bsdi · bsd osOct 12, 1998

    • CVE-2002-0679
      47Plan

      Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitr

      CriticalCVSS 10.0No exploitEPSS 23%

      caldera · unixwareSep 5, 2002

    • CVE-2000-0491
      45Plan

      Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a de

      CriticalCVSS 10.0Proof of conceptEPSS 18%

      gnome · gdmMay 24, 2000

    • CVE-2000-0844
      45Plan

      Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke

      CriticalCVSS 10.0Proof of conceptEPSS 16%

      caldera · openlinux ebuilderNov 14, 2000

    • CVE-1999-0042
      44Plan

      Buffer overflow in University of Washington's implementation of IMAP and POP servers.

      CriticalCVSS 10.0Proof of conceptEPSS 13%

      university of washington · imapApr 7, 1997

    • CVE-1999-0879
      43Plan

      Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.

      CriticalCVSS 10.0Proof of conceptEPSS 10%

      bsdi · bsd osOct 1, 1999

    • CVE-2001-0181
      42Plan

      Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrar

      CriticalCVSS 10.0No exploitEPSS 5%

      caldera · openlinux desktopMar 26, 2001

    • CVE-2000-0370
      41Plan

      The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail

      CriticalCVSS 10.0No exploitEPSS 5%

      caldera · openlinuxJan 29, 1999

    • CVE-2002-0311
      41Plan

      Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell m

      CriticalCVSS 10.0Proof of conceptEPSS 5%

      caldera · unixwareMay 31, 2002

    • CVE-2014-2935
      41Plan

      costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacter

      CriticalCVSS 10.0No exploitEPSS 4%

      caldera · calderaMay 8, 2014

    • CVE-2000-0374
      41Plan

      The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, wh

      CriticalCVSS 10.0No exploitEPSS 4%

      caldera · openlinuxAug 22, 1999

    • CVE-1999-0047
      41Plan

      MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.

      CriticalCVSS 10.0No exploitEPSS 3%

      eric allman · sendmailJan 28, 1997

    • CVE-2001-1359
      41Plan

      Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which a

      CriticalCVSS 10.0No exploitEPSS 3%

      caldera · volutionJun 8, 2001

    • CVE-2001-0850
      41Plan

      A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could all

      CriticalCVSS 10.0No exploitEPSS 2%

      caldera · openlinuxDec 6, 2001

    • CVE-2002-0988
      41Plan

      Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.

      CriticalCVSS 10.0No exploitEPSS 2%

      caldera · unixwareSep 24, 2002

    • CVE-2002-0677
      32Monitor

      CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain pri

      HighCVSS 7.5No exploitEPSS 7%

      caldera · unixwareJul 23, 2002

    • CVE-2002-0678
      31Monitor

      CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file u

      HighCVSS 7.2No exploitEPSS 9%

      caldera · unixwareJul 23, 2002

    • CVE-2002-0885
      31Monitor

      Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX

      HighCVSS 7.5No exploitEPSS 3%

      caldera · unixwareOct 4, 2002

    • CVE-2001-0869
      31Monitor

      Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow r

      HighCVSS 7.5No exploitEPSS 3%

      caldera · openlinux workstationDec 21, 2001

    • CVE-2002-0884
      31Monitor

      Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating sys

      HighCVSS 7.5No exploitEPSS 3%

      caldera · unixwareOct 4, 2002

    • CVE-1999-0439
      31Monitor

      Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc config

      HighCVSS 7.5No exploitEPSS 3%

      procmail · procmailApr 5, 1999